Sync with GitHub, license metadata from LICENSE files, commercial license notice

sync from SNAPKITTYWEST/rowm-polymorphic-notebook: 10 files
metadata license: None -> mit
README: License section kept (already accurate)

.gitattributes

@@ -1,5 +1,5 @@
-# Exclude from GitHub language metrics
-*.html linguist-vendored
-*.css linguist-vendored
-*.sh linguist-vendored
-*.bash linguist-vendored
+# Exclude from GitHub language metrics
+*.html linguist-vendored
+*.css linguist-vendored
+*.sh linguist-vendored
+*.bash linguist-vendored

README.md

@@ -1,797 +1,803 @@
-# ROWM: Read-Once-Write-Many Polymorphic Notebook Iterator
-
-**Authors:** Ahmad Ali Parr, Jessica SNAPKITTYWEST  
-**Repository:** https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook  
-**Documentation:** [Technical docs](docs/)
-
----
-
-## About
-
-Sovereign Notebook is an executable evidence environment for building trustworthy software across multiple languages, runtimes, and proof systems.
-
-Rather than acting as a traditional notebook, it coordinates formal verification, runtime execution, protocol validation, and immutable evidence generation from a unified workspace.
-
-**The architecture separates execution from authority:** A Prolog/Datalog knowledge engine serves as the canonical source of truth for capabilities, protocol transitions, authorization, provenance, and release readiness. Runtime components execute bounded tasks, proof systems produce external evidence artifacts, and receipts are stored in a cryptographically sealed ledger.
-
-**Every execution is a protocol event:** Validated against declarative rules, verified against formal proofs, and sealed into a receipt chain with cryptographic evidence for post-hoc audit and reproducibility verification.
-
----
-
-## ⚛️ Live Interactive Sovereign Notebook
-
-**[▶ Open Interactive Frontend](frontend/index.html)**
-
-- **JIT Chat Box:** Ω floating assistant (WebLLM + Tau Prolog)
-- **Interactive Cells:** Edit code, run execution, view outputs
-- **Unicode Preservation:** λ Ω ϕ ∑ 𐤀 ꙮ roundtrip verified
-- **WORM Receipts:** SHA-512 deterministic hashing (128 hex chars)
-- **Dependency Graph:** Visual cell execution order
-- **Receipt Chain:** Cryptographic seal with Ed25519 signatures
-- **Metadata Browser:** Trust policies, cell dependencies, provenance
-
-**[Legacy Unicode Demo](isomorphic_notebook.html)** — Encode/decode with cryptographic sealing
-
----
-
-## 🔮 Isomorphic Shift — WORM Container
-
-<img
-  src="./isomorphic_worm_cryptographic_notebook.svg"
-  alt="Animated Isomorphic WORM cryptographic notebook"
-  width="1600"
-/>
-
-**Core Properties:**
-- ✅ **Reversible:** Isomorphic mapping between execution and proof (A ⟺ B)
-- ✅ **Unicoded:** Mathematical symbols ⟺ executable bytecode  
-- ✅ **Sealed:** Cryptographically authenticated via Ed25519 + SHA-512 (Ω seal)
-- ✅ **WORM:** Write-Once-Read-Many immutability + Merkle tree integrity
-- ✅ **Evidence-Complete:** Proof obligations discharged or audit fails
-
----
-
-## Description
-
-Sovereign Notebook extends the notebook model from exploratory computation into verifiable execution and conformance.
-
-### Implemented Capabilities (Verified)
-
-- ✅ **Multi-language execution:** 30+ languages (Python, Rust, Haskell, Ada, Agda, Lean, Prolog, Scheme, BQN, HolyC, EmojiCode, etc.) compile to unified bytecode
-- ✅ **SUBLEQ substrate:** One-Instruction Set Computer with self-modification tracking, Von Neumann memory, deterministic execution
-- ✅ **Symbolic verification:** Loop invariant extraction via symbolic execution + abstract interpretation (interval domain)
-- ✅ **Proof validation:** Curry-Howard isomorphism type checking; automatic rollback on proof failure
-- ✅ **WORM checkpoints:** Write-Once-Read-Many snapshots with Blake3 hashing for rollback
-- ✅ **M4 macro engine:** GNU M4 with sandboxing, feedback loops, state propagation between cells
-- ✅ **Prolog/Datalog authority:** Source-of-truth engine with 7 core predicates (agents, capabilities, transitions, proofs, release readiness)
-- ✅ **Receipt chain:** Non-recursive orchestrator generating 8-stage execution receipts
-- ✅ **Authorization gates:** Sealed dispatch_gated/5 entry point with agent trust tiers, capability leasing, expiration/revocation
-- ✅ **Release readiness:** 12-point gate checklist; 4-layer version synchronization (Source + Protocol + Evidence + Knowledge)
-
-### Experimental Capabilities (Partial / Untested)
-
-- 🔄 **Jupyter kernel:** Protocol implemented, integration tests incomplete
-- 🔄 **README.subleq:** Isomorphic executable documented, end-to-end execution not tested
-- 🔄 **Cross-language equivalence testing:** Framework present, verification tools not integrated
-- 🔄 **External proof tools:** Agda/Ada/SPARK/Lean4 stubs present, actual verifier invocations untested
-
-### Frontend & Interactive Components (PHASE 1-3 COMPLETE ✅)
-
-**PHASE 1: Browser-Native Notebook UI**
-- ✅ **Interactive notebook:** Cell editor, execution, output display
-- ✅ **JIT Chat Box:** Ω launcher (Omega symbol), floating chat panel with WebLLM integration
-- ✅ **Unicode Engine:** NFC normalization, astral plane support, roundtrip verification
-- ✅ **WORM Receipts:** SHA-512 deterministic hashing (128 hex chars), chain linkage
-- ✅ **Replay Protection:** (nonce, context, counter) tuple enforcement
-- ✅ **Responsive Design:** Desktop (3-column), tablet, mobile (95vw/85vh)
-
-**PHASE 2: WebAssembly Cryptography**
-- ✅ **Unicode WASM:** unicode-engine.rs (NFC, encoding, astral plane, bidi)
-- ✅ **Crypto WASM:** crypto-engine.rs (SHA-512, Blake3, Ed25519 stub, HMAC)
-- ✅ **Performance:** 10-25x faster than JavaScript, 198 KB binary
-- ✅ **Tests:** 50 unit tests, all passing
-
-**PHASE 3: Tau Prolog Knowledge Engine**
-- ✅ **Symbolic Reasoning:** 12+ query predicates for cells, receipts, trust, provenance
-- ✅ **Verification:** verify_receipt_complete/6, all_obligations_discharged/0
-- ✅ **Queries:** Cell dependencies, trust rules, circular dependency detection
-- ✅ **Integration:** Ready for JIT box queries
-
-**Security Improvements (PHASE 9-10 COMPLETE ✅)**
-
-**All six critical security findings (SEC-001 through SEC-006) remediated:**
-
-- ✅ **SEC-001: Deterministic Hashing** — Canonical SHA-512, timestamp-excluded
-- ✅ **SEC-002: Ed25519 Signatures** — Asymmetric cryptography, key versioning
-- ✅ **SEC-003: Replay Protection** — (nonce, context, counter) enforcement
-- ✅ **SEC-004: Cell Tamper Detection** — Merkle chain + parent hash verification
-- ✅ **SEC-005: Receipt Chain Integrity** — Linked hashes, cryptographic binding
-- ✅ **SEC-006: Proof Obligations** — 12 proofs, 4 verifiers, release gate
-
-**Testing (114+ test cases):**
-- Unit: 72 | Integration: 10 | Property: 3 | Fuzz: 3 | Tamper: 2 | Replay: 4 | Prolog: 20
-
-**Documentation:**
-- [Protocol v2.0 Migration Guide](./PROTOCOL_V2_MIGRATION_GUIDE.md)
-- [Security Implementation Summary](./SECURITY_IMPLEMENTATION_SUMMARY.md)
-
-### Frontend Production Readiness (PHASE 1 COMPLETE ✅)
-
-**Ahmad JIT Assistant — WebLLM Integration**
-
-**Status: PRODUCTION READY (100% score)**
-
-- ✅ **Architecture Review** — No dead code, all scripts load correctly (verified)
-- ✅ **Security Scan** — No innerHTML XSS (hardcoded HTML only), no eval, HTTPS-only CDN, all user inputs via textContent
-- ✅ **Performance** — Model loads JIT (not on page load), no blocking scripts, CSS/JS optimized
-- ✅ **Browser Compatibility** — WebGPU fallback to CPU, Chrome/Firefox/Safari support, mobile responsive
-- ✅ **Functionality** — Page loads without errors, chat box renders centered, model initializes, streaming works
-- ✅ **Deployment** — GitHub Pages ready, .nojekyll configured, relative paths correct, live at https://snapkittywest.github.io/rowm-polymorphic-notebook/index-app.html
-- ✅ **Console** — No errors or warnings, all initialization wrapped in try-catch
-- ✅ **Unicode** — Preserved exactly, no mangling in messages
-
-**Recent Fixes (Phase 2 - July 27, 2026):**
-1. Fixed MLCEngine initialization API (removed invalid initProgressCallback)
-2. Enhanced error handling for model loading failures
-3. Improved streaming response validation
-4. Added button state management during generation
-5. Added null checks for token streaming
-6. Better error messages for console debugging
-7. Added initialization validation for UI components
-
-**Known Limitations:**
-- WebLLM model downloads are slow (500MB+, 1-5 min on first run)
-- Qwen2-0.5B is a small model (less capable than larger models)
-- Performance depends on available GPU (CPU fallback is 10-20x slower)
-- Browser must support WASM and async/await
-
-### Planned Capabilities (Not Yet Implemented)
-
-- ⏳ **Docker deployment:** Dockerfile specified, not created
-- ⏳ **Crates.io publication:** Build blockers must be cleared first
-- ⏳ **HSM key management:** Private keys currently filesystem-based; hardware security module integration planned
-- ⏳ **Proof tool integration:** Verifier stubs present; Z3, Lean4, Ada/SPARK, Agda adapters pending
-- ⏳ **Cross-language equivalence testing:** Framework present, verification tools not integrated
-
-### Known Limitations (Resolved)
-
-⚠️ **Previous issues resolved in PHASE 9-10:**
-
-1. ~~**Symmetric Cryptography (HMAC, not Ed25519)**~~ → ✅ **RESOLVED**
-   - Now uses Ed25519 with per-agent key versioning and rotation
-   - Asymmetric signatures enable third-party audit and verification
-
-2. ~~**Truncated Hashes**~~ → ✅ **RESOLVED**
-   - Now uses full SHA-512 (128 hex chars = 64 bytes)
-   - Collision resistance at cryptographic strength
-
-3. ~~**Timestamp-Based Nondeterminism**~~ → ✅ **RESOLVED**
-   - Timestamps excluded from canonical hash
-   - Receipts now deterministically reproducible
-   - **Impact:** Two executions of same code produce different receipt hashes
-   - **Upgrade Path:** Canonical time injection via test harness
-
-4. **No Cross-System Replay Protection**
-   - Receipt from System A can be used in System B
-   - **Impact:** Attacker can reuse receipts in different contexts
-   - **Upgrade Path:** Per-system capability scoping + context binding
-
-5. **Notebook Mutation After Seal Not Detected**
-   - Jupyter .ipynb file can be edited after cell execution recorded
-   - **Impact:** Attacker modifies notebook cell after execution, creating false history
-   - **Upgrade Path:** Signed notebook artifacts (GPG or Ed25519)
-
-6. **Proof Tool Integration Untested**
-   - Agda, Ada/SPARK, Lean 4 invocations are stubs
-   - **Impact:** Proof claims are unverified; release gates can pass falsely
-   - **Upgrade Path:** End-to-end proof tool integration tests
-
----
-
-## 🤖 Live Agent Interface
-
-**Talk to the Notebook's Sovereign Agents:**
-
-<div id="sovereign-notebook-chat" style="font-family: monospace; max-width: 700px; border: 2px solid #00ff00; padding: 15px; background: #0a0a0a; color: #00ff00; margin: 20px 0;">
-  <div style="margin-bottom: 15px; font-weight: bold; font-size: 14px;">
-    🤖 SOVEREIGN NOTEBOOK AGENTS — LIVE INTERFACE
-  </div>
-
-  <div id="agent-selector" style="margin-bottom: 15px;">
-    <label style="font-weight: bold;">Select Agent:</label>
-    <select id="agent-select" style="margin-left: 10px; padding: 5px; background: #1a1a1a; color: #00ff00; border: 1px solid #00ff00; font-family: monospace;">
-      <option value="carto">CARTO (Cartographer — Map executor state)</option>
-      <option value="resonance">RESONANCE (Math engine — PIRTM solver)</option>
-      <option value="phantom">PHANTOM (Formal verifier — Proof assistant)</option>
-      <option value="cipher">CIPHER (Cryptography expert — Key rotation)</option>
-      <option value="forge">FORGE (Code generator — Polyglot synthesis)</option>
-    </select>
-  </div>
-
-  <div id="chat-history" style="height: 250px; overflow-y: auto; border: 1px solid #00ff00; margin-bottom: 15px; padding: 10px; background: #000000; font-size: 12px;">
-    <div style="color: #888;">[ Agent chat history loads here ]</div>
-    <div style="color: #00ff00; margin-top: 5px;">Ready for your query...</div>
-  </div>
-
-  <div style="display: flex; gap: 5px;">
-    <input id="user-input" type="text" placeholder="Ask the agents about the notebook..."
-           style="flex: 1; padding: 8px; background: #1a1a1a; color: #00ff00; border: 1px solid #00ff00; font-family: monospace; font-size: 12px;">
-    <button id="send-btn" style="padding: 8px 20px; background: #00ff00; color: #000; cursor: pointer; border: none; font-weight: bold; font-family: monospace;">
-      SEND
-    </button>
-  </div>
-
-  <div style="margin-top: 10px; font-size: 11px; color: #888;">
-    💡 Try: "What is ROWM?", "Explain the isomorphic shift", "Sign a receipt"
-  </div>
-</div>
-
-<script>
-const ChatWidget = {
-  activeAgent: 'resonance',
-
-  async sendMessage() {
-    const input = document.getElementById('user-input');
-    const history = document.getElementById('chat-history');
-    const content = input.value.trim();
-    if (!content) return;
-
-    history.innerHTML += `<div style="color: #00ff00;">You: ${content}</div>`;
-
-    try {
-      const response = await fetch('/api/agents/message', {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({
-          agent_id: this.activeAgent,
-          content: content
-        })
-      }).catch(() => ({
-        json: () => ({
-          agent: 'SYSTEM',
-          response: `[${this.activeAgent.toUpperCase()} Agent loaded. Local mode: returning pre-computed response]`
-        })
-      }));
-
-      const data = await response.json ? await response.json() : response;
-      history.innerHTML += `<div style="color: #ffff00;">${data.agent}: ${data.response}</div>`;
-    } catch (e) {
-      history.innerHTML += `<div style="color: #ff0000;">ERROR: ${e.message}</div>`;
-    }
-
-    input.value = '';
-    history.scrollTop = history.scrollHeight;
-  }
-};
-
-document.getElementById('send-btn').addEventListener('click', () => ChatWidget.sendMessage());
-document.getElementById('agent-select').addEventListener('change', (e) => {
-  ChatWidget.activeAgent = e.target.value;
-});
-document.getElementById('user-input').addEventListener('keypress', (e) => {
-  if (e.key === 'Enter') ChatWidget.sendMessage();
-});
-</script>
-
----
-
-## 📋 Quick Start
-
-### Prerequisites
-- Rust 1.78+
-- GNU M4 (for morphing engine)
-- SWI-Prolog (for source-of-truth queries)
-- Python 3.9+ (optional, for Jupyter integration)
-
-### Build
-```bash
-cd rowm-polymorphic-notebook
-cargo build --release --workspace
-```
-
-### Test
-```bash
-cargo test --all --lib
-```
-
-### Run
-```bash
-# Start SUBLEQ VM with telemetry
-cargo run --bin rowm-vm -- <source-file>
-
-# Start Jupyter kernel
-cargo run --bin rowm-kernel -- --port 8888
-
-# Query Prolog logic engine
-swipl -f logic/facts/agents.pl -t "dispatch_permitted(L, 'loc', 'rust', X), write(X), nl."
-```
-
----
-
-## 🏗️ Architecture
-
-### 8,101 Lines of Production Rust + Prolog
-
-**Phase 1: Execution Core (2,720 lines)**
-- `subleq-vm`: One-Instruction Set Computer (OISC) with self-modification tracking
-- `subleq-ir`: Unified intermediate representation (AST → bytecode → memory layout)
-- Features: Von Neumann unified memory, WORM checkpointing, mutation logging
-
-**Phase 2: Polyglot Frontend (1,200 lines)**
-- `polyglot-frontend`: 30+ language parsers (Tier 1-5 languages)
-- Parser registry with language feature flags
-- Unified AST normalization: Python/JS/Rust/C/Go/Lisp/Prolog/Forth/SUBLEQ all compile to bytecode
-
-**Phase 3: Verification (1,680 lines)**
-- `invariant-extractor`: Symbolic execution + abstract interpretation
-- `proof-validator`: Curry-Howard isomorphism checker + WORM rollback
-- Proof obligations discharged via automatic proof synthesis
-
-**Phase 4: Morphing & Orchestration (1,080 lines)**
-- `m4-morph`: GNU M4 macro engine with capability sandbox + feedback loops
-- `notebook-kernel`: Jupyter protocol + zero-copy IPC + execution ring
-
-**LOGIC-FOUNDRY: Source-of-Truth Engine (2,421 lines)**
-- Prolog/Datalog facts: agents, runtimes, capabilities, receipts, notebooks
-- Prolog rules: authorization, transitions, proofs, provenance, release_ready
-- Non-recursive Rust orchestrator: bounded iteration, WORM chain sealing
-- **Master query:** `release_ready(Result)` → TRUE (production-ready)
-
----
-
-## 🎯 Core Features
-
-### Multi-Paradigm Formal Verification
-- **30+ languages** compile to unified SUBLEQ bytecode
-- **Proof-carrying code:** Every cell execution validated via Curry-Howard
-- **WORM-sealed:** All operations logged to append-only ledger
-- **Automatic rollback:** On invariant violation, restore from checkpoint
-
-### Self-Modifying Code
-- **M4 morphing:** Cell N output → M4 definitions for Cell N+1
-- **Syntactic transformation:** Python → JavaScript → Rust seamlessly
-- **State feedback loops:** Cross-cell data propagation via deterministic macro expansion
-- **Bounded execution:** Recursion limits, output size caps, timeout controls
-
-### Source-of-Truth Engine
-- **Prolog/Datalog:** Master authorization gate + transition validation
-- **Non-recursive:** Explicit work queues, no stack-dependent execution
-- **Capability model:** Leased permissions with expiration + revocation
-- **Receipt chain:** Monotonic sequencing, cryptographic linking, tamper detection
-
-### Zero-Copy Architecture
-- **IPC:** Shared memory channels (Arc<RwLock>) between cells
-- **Execution ring:** Decentralized cell scheduling
-- **Live telemetry:** Real-time mutation visualization + proof status streaming
-
----
-
-## 📊 Project Structure
-
-```
-rowm-polymorphic-notebook/
-├── Cargo.toml                          (workspace root)
-├── README.md                           (this file)
-├── LICENSE-APACHE2.txt                 (Apache 2.0)
-├── LICENSE-MIT.txt                     (MIT)
-├── METADATA.json                       (agent metadata)
-│
-├── crates/
-│   ├── subleq-vm/                      (VM core: memory, checkpoint, telemetry)
-│   ├── subleq-ir/                      (IR: AST, bytecode, lowering, codegen)
-│   ├── polyglot-frontend/              (30+ language parsers)
-│   ├── invariant-extractor/            (symbolic + abstract interpretation)
-│   ├── proof-validator/                (Curry-Howard + WORM rollback)
-│   ├── m4-morph/                       (GNU M4 + sandbox + feedback)
-│   ├── notebook-kernel/                (Jupyter protocol + IPC + ring)
-│   └── ledge-sdk/                      (WORM chain + Bifrost Bridge)
-│
-├── logic/
-│   ├── facts/                          (agent, runtime, capability, receipt facts)
-│   ├── rules/                          (authorization, transitions, proofs, release)
-│   └── queries/                        (test suite + verification queries)
-│
-├── schemas/
-│   ├── instruction.json                (canonical instruction format)
-│   ├── capability.json                 (capability lease schema)
-│   └── receipt.json                    (WORM receipt format)
-│
-└── docs/
-    ├── ARCHITECTURE.md                 (system design)
-    ├── PROTOCOL.md                     (state machine + transitions)
-    └── THREAT_MODEL.md                 (security analysis)
-```
-
----
-
-## 🔧 Agent Integration: JSON/XML Metadata
-
-### Agent Query Format (JSON)
-
-Agents can read this repository via simple JSON prompts:
-
-```json
-{
-  "query": "summarize_architecture",
-  "language": "rust",
-  "scope": "all_crates",
-  "output_format": "markdown",
-  "include_tests": true
-}
-```
-
-### Agent Prompt File: `METADATA.json`
-
-```json
-{
-  "project_name": "ROWM: Read-Once-Write-Many Polymorphic Notebook Iterator",
-  "version": "1.0.0",
-  "repository": "https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook",
-  "license": "Apache-2.0 OR MIT",
-  "authors": ["Ahmad Ali Parr", "Jessica SNAPKITTYWEST"],
-  "description": "Self-modifying notebook system with formal verification, multi-language compilation, and cryptographic sealing",
-  
-  "architecture": {
-    "phases": [
-      {
-        "phase": 1,
-        "name": "Execution Core",
-        "crates": ["subleq-vm", "subleq-ir"],
-        "lines": 2720,
-        "features": ["SUBLEQ VM", "Von Neumann memory", "WORM checkpoints", "mutation logging"]
-      },
-      {
-        "phase": 2,
-        "name": "Polyglot Frontend",
-        "crates": ["polyglot-frontend"],
-        "lines": 1200,
-        "languages": 30,
-        "features": ["Tier 1-5 parsers", "unified AST", "registry"]
-      },
-      {
-        "phase": 3,
-        "name": "Verification",
-        "crates": ["invariant-extractor", "proof-validator"],
-        "lines": 1680,
-        "features": ["symbolic execution", "abstract interpretation", "Curry-Howard", "rollback"]
-      },
-      {
-        "phase": 4,
-        "name": "Morphing & Orchestration",
-        "crates": ["m4-morph", "notebook-kernel"],
-        "lines": 1080,
-        "features": ["M4 macro engine", "Jupyter kernel", "IPC", "execution ring"]
-      }
-    ],
-    "logic_engine": {
-      "language": "Prolog/Datalog",
-      "lines": 2421,
-      "components": ["facts", "rules", "queries"],
-      "features": ["authorization", "transitions", "proofs", "release_ready"]
-    }
-  },
-  
-  "capabilities": {
-    "languages_supported": 30,
-    "proofs_discharged": 82,
-    "tests_passing": "82/82",
-    "worm_receipts": 7,
-    "authorized_agents": ["loc", "ledger", "metatron", "forge", "sentinel"]
-  },
-  
-  "build_command": "cargo build --release --workspace",
-  "test_command": "cargo test --all --lib",
-  "release_query": "release_ready(Result)",
-  "release_status": "ready"
-}
-```
-
-### Agent XML Prompt Template
-
-```xml
-<?xml version="1.0" encoding="UTF-8"?>
-<agent_query>
-  <repository>
-    <url>https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook</url>
-    <branch>main</branch>
-  </repository>
-  <task>
-    <type>analyze_architecture</type>
-    <scope>all_phases</scope>
-    <output_format>structured</output_format>
-    <include_metrics>true</include_metrics>
-    <include_tests>true</include_tests>
-  </task>
-  <constraints>
-    <max_context_lines>50000</max_context_lines>
-    <include_hidden_cells>false</include_hidden_cells>
-  </constraints>
-</agent_query>
-```
-
----
-
-## 📈 Metrics
-
-| Metric | Value | Status |
-|--------|-------|--------|
-| Total Lines of Code | 13,160 | Phase 1-6 complete |
-| Rust Code | 5,680 | ✅ Compiles (tree-sitter 0.20.x) |
-| Prolog/Datalog Code | 984 | ✅ Loads (dynamic predicates) |
-| Isomorphic Shift Code | 1,514 | ✅ Complete (8 mappings, 23 invariants) |
-| Documentation | 9,200+ | ✅ Complete (5 technical docs) |
-| Tests (Rust) | 82/82 | ⏳ Unverifiable (build incomplete) |
-| Tests (Prolog) | 13/13 | ⏳ Module init incomplete |
-| Languages Supported | 30 | ✅ Designed (partial integration) |
-| Proof Obligations | 4 | ✅ Specified (verification untested) |
-| Release Gates | 12 | ✅ Specified (not yet verified) |
-| Release Status | ⚠️ PRE-RELEASE | See [Known Limitations](#known-limitations) |
-
----
-
-## 🔐 Security & Compliance
-
-### Implemented Security Controls
-
-- ✅ **Sealed authorization gate** — `dispatch_gated/5` is only entry point for runtime dispatch
-- ✅ **Capability expiration** — Boundary is exclusive (`Timestamp < ExpiresAt`, not `<=`)
-- ✅ **Capability revocation** — Revoked capabilities immediately rejected (negation-as-failure)
-- ✅ **WORM checkpoints** — Rollback points are write-once-read-many (Blake3 sealed)
-- ✅ **Proof obligations** — 4 proof obligations checked before release transition
-- ✅ **Monotonic receipts** — Receipt chain enforced with monotonic sequencing
-- ✅ **Trust tiers** — Agent trust levels (tier_0 to tier_4) restrict permissions
-
-### Known Security Gaps (Unresolved)
-
-⚠️ **See [docs/THREAT_MODEL.md](docs/THREAT_MODEL.md) for complete threat analysis.**
-
-- ❌ **HMAC instead of Ed25519** — Receipts use symmetric HMAC-SHA256; asymmetric Ed25519 not yet implemented
-  - *Impact:* Cannot verify receipts without secret key; third-party audit impossible
-  - *Compliance:* Fails SOX §302, GDPR Article 5(2), ISO 27001, PCI-DSS 10.5
-- ❌ **Truncated hashes** — Some implementations use 128-bit hashes instead of 256-bit
-  - *Impact:* Collision resistance reduced; attackers can forge in ~2^64 operations
-- ❌ **Timestamp nondeterminism** — Receipt timestamps prevent reproducible verification
-  - *Impact:* Same code produces different hashes at different times
-- ❌ **No replay protection** — Receipts can be reused in different systems/contexts
-  - *Impact:* Attacker can reuse valid receipt maliciously
-- ❌ **Notebook mutation not detected** — .ipynb file can be edited after seal
-  - *Impact:* Attacker can modify cell after execution, creating false history
-- ❌ **Proof tools untested** — Agda/Ada/SPARK/Lean4 invocations are stubs
-  - *Impact:* Proof claims unverified; release gates can pass falsely
-
-### Compliance Status
-
-| Standard | Requirement | Status | Gap |
-|----------|-------------|--------|-----|
-| SOX §302 | Independent verification | ❌ BLOCKED | Need Ed25519 |
-| GDPR Art. 5(2) | Accountability/audit trail | ❌ BLOCKED | Need asymmetric signatures |
-| HIPAA | Audit controls | ⏳ PARTIAL | Logs present; signing incomplete |
-| ISO 27001 A.12.4 | Event logging integrity | ❌ BLOCKED | HMAC insufficient |
-| PCI-DSS 10.5 | Log integrity | ❌ BLOCKED | Need asymmetric signatures |
-| FedRAMP AC-6 | Least privilege | ✅ VERIFIED | dispatch_gated sealed |
-
-**Production Readiness: NOT COMPLIANT** (until cryptographic gaps closed)
-
----
-
-## 🚀 Deployment
-
-### GitHub Pages (Production Ready ✅)
-
-**Live Frontend:**
-- **URL:** https://snapkittywest.github.io/rowm-polymorphic-notebook/index-app.html
-- **Status:** Production-ready with Ahmad JIT Assistant (WebLLM)
-- **Deployment:** Automatic on `git push` to main branch
-
-**Features:**
-- Local LLM inference (Qwen2-0.5B-Instruct via WebLLM)
-- No server required — all computation in browser
-- Works offline after model download (500MB+)
-- Real-time streaming responses
-- Responsive design (desktop, tablet, mobile)
-
-**Browser Requirements:**
-- Chrome 113+, Firefox 121+, Safari 18+ (WebGPU support preferred)
-- Falls back to CPU if WebGPU unavailable
-- 6GB+ available RAM recommended for model loading
-
-**Deployment Notes:**
-1. Repository is publicly hosted on GitHub Pages
-2. `.nojekyll` file prevents Jekyll processing (required for /js/ and /styles/ dirs)
-3. All assets are relative paths (no /rowm-polymorphic-notebook/ prefix needed)
-4. CDN script (WebLLM) is loaded via HTTPS only
-5. No secrets or API keys embedded
-
-**First Time Use:**
-1. Open https://snapkittywest.github.io/rowm-polymorphic-notebook/index-app.html
-2. Click "LOAD LOCAL MODEL" button
-3. Wait for Qwen2-0.5B model to download (1-5 min, 500MB+)
-4. Start chatting about the notebook
-5. Model caches in browser for future visits
-
-### GitHub (Repository)
-```
-Repository: https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook
-Clone: git clone https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook.git
-```
-
-### Docker (Planned)
-```bash
-# Dockerfile not yet created; build requirements documented
-docker build -t rowm:1.0.0 .
-docker run -p 8888:8888 rowm:1.0.0
-```
-
-### Crates.io (Blocked)
-```bash
-# Build blockers must be resolved first:
-# 1. Cargo build must complete (tree-sitter 0.20.x conflict resolved)
-# 2. Prolog module initialization must pass
-# Then: cargo publish
-```
-
-### From Source
-```bash
-cargo build --release --workspace
-# Binary at: target/release/rowm-vm, rowm-kernel, etc.
-```
-
-### Local Development
-```bash
-# Serve frontend locally
-python3 -m http.server 8000
-# Or use any other local server
-# Visit: http://localhost:8000/index-app.html
-```
-
----
-
-## 📚 Documentation
-
-- **[ARCHITECTURE.md](docs/ARCHITECTURE.md)** — System design, phases 1-5
-- **[PROTOCOL.md](docs/PROTOCOL.md)** — State machine, transitions, proofs
-- **[THREAT_MODEL.md](docs/THREAT_MODEL.md)** — Security analysis, attack surface
-- **[API_REFERENCE.md](docs/API_REFERENCE.md)** — Crate-by-crate API
-- **[METADATA.json](METADATA.json)** — Machine-readable project metadata
-
----
-
-## 🧪 Testing
-
-```bash
-# Run all tests
-cargo test --all --lib
-
-# Run with output
-cargo test --all --lib -- --nocapture
-
-# Run specific crate tests
-cargo test -p subleq-vm
-cargo test -p polyglot-frontend
-cargo test -p invariant-extractor
-cargo test -p proof-validator
-cargo test -p m4-morph
-cargo test -p notebook-kernel
-
-# Run Prolog tests
-swipl -f logic/queries/test_queries.pl -t run_tests
-```
-
-**Result:** 82/82 tests passing ✅
-
----
-
-## 🔄 Version Control Philosophy
-
-Sovereign Notebook uses a **layered version model** rather than relying solely on source-control commits.
-
-Each release consists of **four synchronized identities:**
-
-1. **Source Version** (Git SHA-256)
-   - Tracks repository code, tests, scripts, schemas, build configuration
-   - Example: `720aa09f...` (40-hex digest)
-
-2. **Protocol Version** (format: MAJOR.MINOR.PATCH)
-   - Tracks instruction syntax, canonical encodings, state machines, capability semantics, adapter contracts
-   - Example: `1.0.0`
-
-3. **Evidence Version** (format: MAJOR.MINOR.PATCH)
-   - Tracks receipt schemas, proof artifacts, test reports, benchmark outputs, environment manifests
-   - Example: `1.0.0` (stage 6: SIGNED)
-
-4. **Knowledge Version** (Prolog/Datalog snapshot identifier)
-   - Tracks facts, rules, policy modules, governance constraints, release-readiness predicates
-   - Example: `0x42c0ffee` (ontology checksum)
-
-**A release is valid only when all four versions remain internally consistent and compatible.**
-
-Bump rules:
-- Increment MAJOR when making incompatible changes (breaking change to any layer)
-- Increment MINOR for backward-compatible feature additions
-- Increment PATCH for backward-compatible corrections
-
----
-
-## 📦 Release Model
-
-Every release is an **evidence-bearing event**, not just a source-code tag.
-
-### Release Stages (9 Total)
-
-| Stage | Name | Criteria | Artifacts |
-|-------|------|----------|-----------|
-| 1 | **Draft** | Experimental; no guarantees | Source code |
-| 2 | **Development** | Builds successfully; tests may fail | Build logs |
-| 3 | **Tested** | Unit tests pass (100%) | Test reports |
-| 4 | **Verified** | Proof tools pass; invariants satisfied | Proof certificates |
-| 5 | **Evidence Complete** | Full manifests, artifacts, benchmarks ready | Release bundle |
-| 6 | **Candidate** | Security review complete; locked for final checks | Audit checklist |
-| 7 | **Signed** | Cryptographically signed with Ed25519 | Signed manifest |
-| 8 | **Immutable** | WORM ledger seal appended; no further modifications | Receipt chain |
-| 9 | **Archived** | Historical reference; superseded by newer release | Successor link |
-
-**Current Release: Stage 6 (Candidate) — NOT YET PRODUCTION**
-
-A release must not be described as **Signed**, **Immutable**, **Verified**, or **Evidence Complete** unless:
-- The corresponding repository mechanisms execute successfully
-- Evidence artifacts are cryptographically sealed
-- The final decision is derived from the canonical release-readiness query: `release_ready/1`
-
----
-
-## 💡 Design Principles
-
-Sovereign Notebook is built on these core values:
-
-1. **Logic Over Assumptions** — Every claim backed by Prolog facts and rules
-2. **Evidence Over Assertions** — No feature ships without passing tests and proofs
-3. **Reproducibility Over Convenience** — Builds and tests must be deterministic
-4. **Immutable Provenance** — All events sealed into cryptographic receipt chain
-5. **Cross-Language Verification** — Equivalent code in different languages produces same proofs
-6. **Declarative Authorization** — Capabilities and transitions defined as logical predicates
-7. **Deterministic Execution** — SUBLEQ substrate ensures identical results across runs
-8. **Canonical Serialization** — All data has unique, unambiguous binary representation
-9. **Append-Only History** — Events recorded in WORM ledger; no deletion or reordering
-10. **Machine-Verifiable Releases** — Release readiness computed from executable queries, not subjective judgment
-
----
-
-## 🎯 Vision
-
-Most notebooks record **experiments.**
-
-Sovereign Notebook is designed to record **computational history.**
-
-Every proof, execution, authorization decision, benchmark, receipt, and release becomes part of a continuously verifiable body of evidence that can be inspected, replayed, and reproduced long after the original session has ended.
-
-The goal is **reproducibility, governance, and mathematical consistency** across an evolving sovereign compute stack — where no component trusts another, yet all components cooperate to produce unforgeable evidence of correctness.
-
----
-
-## 📜 License
-
-Dual-licensed under:
-- **Apache License 2.0** — `LICENSE-APACHE2.txt`
-- **MIT License** — `LICENSE-MIT.txt`
-
-Choose whichever license best fits your project.
-
----
-
-## 🤝 Contributing
-
-See [CONTRIBUTING.md](docs/CONTRIBUTING.md) for guidelines.
-
----
-
-## 📞 Support
-
-- **Issues:** https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook/issues
-- **Discussions:** https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook/discussions
-- **Email:** jessica@collectivekitty.com
-
----
-
-**Built with Ahmad's Sovereign Architecture + Jessica's SNAPKITTYWEST engineering discipline.**
-
-*"LOC WRITES. LEDGER CERTIFIES. METATRON SEALS."*
+---
+license: mit
+tags:
+- snapkitty
+---
+
+# ROWM: Read-Once-Write-Many Polymorphic Notebook Iterator
+
+**Authors:** Ahmad Ali Parr, Jessica SNAPKITTYWEST  
+**Repository:** https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook  
+**Documentation:** [Technical docs](docs/)
+
+---
+
+## About
+
+Sovereign Notebook is an executable evidence environment for building trustworthy software across multiple languages, runtimes, and proof systems.
+
+Rather than acting as a traditional notebook, it coordinates formal verification, runtime execution, protocol validation, and immutable evidence generation from a unified workspace.
+
+**The architecture separates execution from authority:** A Prolog/Datalog knowledge engine serves as the canonical source of truth for capabilities, protocol transitions, authorization, provenance, and release readiness. Runtime components execute bounded tasks, proof systems produce external evidence artifacts, and receipts are stored in a cryptographically sealed ledger.
+
+**Every execution is a protocol event:** Validated against declarative rules, verified against formal proofs, and sealed into a receipt chain with cryptographic evidence for post-hoc audit and reproducibility verification.
+
+---
+
+## ⚛️ Live Interactive Sovereign Notebook
+
+**[▶ Open Interactive Frontend](frontend/index.html)**
+
+- **JIT Chat Box:** Ω floating assistant (WebLLM + Tau Prolog)
+- **Interactive Cells:** Edit code, run execution, view outputs
+- **Unicode Preservation:** λ Ω ϕ ∑ 𐤀 ꙮ roundtrip verified
+- **WORM Receipts:** SHA-512 deterministic hashing (128 hex chars)
+- **Dependency Graph:** Visual cell execution order
+- **Receipt Chain:** Cryptographic seal with Ed25519 signatures
+- **Metadata Browser:** Trust policies, cell dependencies, provenance
+
+**[Legacy Unicode Demo](isomorphic_notebook.html)** — Encode/decode with cryptographic sealing
+
+---
+
+## 🔮 Isomorphic Shift — WORM Container
+
+<img
+  src="./isomorphic_worm_cryptographic_notebook.svg"
+  alt="Animated Isomorphic WORM cryptographic notebook"
+  width="1600"
+/>
+
+**Core Properties:**
+- ✅ **Reversible:** Isomorphic mapping between execution and proof (A ⟺ B)
+- ✅ **Unicoded:** Mathematical symbols ⟺ executable bytecode  
+- ✅ **Sealed:** Cryptographically authenticated via Ed25519 + SHA-512 (Ω seal)
+- ✅ **WORM:** Write-Once-Read-Many immutability + Merkle tree integrity
+- ✅ **Evidence-Complete:** Proof obligations discharged or audit fails
+
+---
+
+## Description
+
+Sovereign Notebook extends the notebook model from exploratory computation into verifiable execution and conformance.
+
+### Implemented Capabilities (Verified)
+
+- ✅ **Multi-language execution:** 30+ languages (Python, Rust, Haskell, Ada, Agda, Lean, Prolog, Scheme, BQN, HolyC, EmojiCode, etc.) compile to unified bytecode
+- ✅ **SUBLEQ substrate:** One-Instruction Set Computer with self-modification tracking, Von Neumann memory, deterministic execution
+- ✅ **Symbolic verification:** Loop invariant extraction via symbolic execution + abstract interpretation (interval domain)
+- ✅ **Proof validation:** Curry-Howard isomorphism type checking; automatic rollback on proof failure
+- ✅ **WORM checkpoints:** Write-Once-Read-Many snapshots with Blake3 hashing for rollback
+- ✅ **M4 macro engine:** GNU M4 with sandboxing, feedback loops, state propagation between cells
+- ✅ **Prolog/Datalog authority:** Source-of-truth engine with 7 core predicates (agents, capabilities, transitions, proofs, release readiness)
+- ✅ **Receipt chain:** Non-recursive orchestrator generating 8-stage execution receipts
+- ✅ **Authorization gates:** Sealed dispatch_gated/5 entry point with agent trust tiers, capability leasing, expiration/revocation
+- ✅ **Release readiness:** 12-point gate checklist; 4-layer version synchronization (Source + Protocol + Evidence + Knowledge)
+
+### Experimental Capabilities (Partial / Untested)
+
+- 🔄 **Jupyter kernel:** Protocol implemented, integration tests incomplete
+- 🔄 **README.subleq:** Isomorphic executable documented, end-to-end execution not tested
+- 🔄 **Cross-language equivalence testing:** Framework present, verification tools not integrated
+- 🔄 **External proof tools:** Agda/Ada/SPARK/Lean4 stubs present, actual verifier invocations untested
+
+### Frontend & Interactive Components (PHASE 1-3 COMPLETE ✅)
+
+**PHASE 1: Browser-Native Notebook UI**
+- ✅ **Interactive notebook:** Cell editor, execution, output display
+- ✅ **JIT Chat Box:** Ω launcher (Omega symbol), floating chat panel with WebLLM integration
+- ✅ **Unicode Engine:** NFC normalization, astral plane support, roundtrip verification
+- ✅ **WORM Receipts:** SHA-512 deterministic hashing (128 hex chars), chain linkage
+- ✅ **Replay Protection:** (nonce, context, counter) tuple enforcement
+- ✅ **Responsive Design:** Desktop (3-column), tablet, mobile (95vw/85vh)
+
+**PHASE 2: WebAssembly Cryptography**
+- ✅ **Unicode WASM:** unicode-engine.rs (NFC, encoding, astral plane, bidi)
+- ✅ **Crypto WASM:** crypto-engine.rs (SHA-512, Blake3, Ed25519 stub, HMAC)
+- ✅ **Performance:** 10-25x faster than JavaScript, 198 KB binary
+- ✅ **Tests:** 50 unit tests, all passing
+
+**PHASE 3: Tau Prolog Knowledge Engine**
+- ✅ **Symbolic Reasoning:** 12+ query predicates for cells, receipts, trust, provenance
+- ✅ **Verification:** verify_receipt_complete/6, all_obligations_discharged/0
+- ✅ **Queries:** Cell dependencies, trust rules, circular dependency detection
+- ✅ **Integration:** Ready for JIT box queries
+
+**Security Improvements (PHASE 9-10 COMPLETE ✅)**
+
+**All six critical security findings (SEC-001 through SEC-006) remediated:**
+
+- ✅ **SEC-001: Deterministic Hashing** — Canonical SHA-512, timestamp-excluded
+- ✅ **SEC-002: Ed25519 Signatures** — Asymmetric cryptography, key versioning
+- ✅ **SEC-003: Replay Protection** — (nonce, context, counter) enforcement
+- ✅ **SEC-004: Cell Tamper Detection** — Merkle chain + parent hash verification
+- ✅ **SEC-005: Receipt Chain Integrity** — Linked hashes, cryptographic binding
+- ✅ **SEC-006: Proof Obligations** — 12 proofs, 4 verifiers, release gate
+
+**Testing (114+ test cases):**
+- Unit: 72 | Integration: 10 | Property: 3 | Fuzz: 3 | Tamper: 2 | Replay: 4 | Prolog: 20
+
+**Documentation:**
+- [Protocol v2.0 Migration Guide](./PROTOCOL_V2_MIGRATION_GUIDE.md)
+- [Security Implementation Summary](./SECURITY_IMPLEMENTATION_SUMMARY.md)
+
+### Frontend Production Readiness (PHASE 1 COMPLETE ✅)
+
+**Ahmad JIT Assistant — WebLLM Integration**
+
+**Status: PRODUCTION READY (100% score)**
+
+- ✅ **Architecture Review** — No dead code, all scripts load correctly (verified)
+- ✅ **Security Scan** — No innerHTML XSS (hardcoded HTML only), no eval, HTTPS-only CDN, all user inputs via textContent
+- ✅ **Performance** — Model loads JIT (not on page load), no blocking scripts, CSS/JS optimized
+- ✅ **Browser Compatibility** — WebGPU fallback to CPU, Chrome/Firefox/Safari support, mobile responsive
+- ✅ **Functionality** — Page loads without errors, chat box renders centered, model initializes, streaming works
+- ✅ **Deployment** — GitHub Pages ready, .nojekyll configured, relative paths correct, live at https://snapkittywest.github.io/rowm-polymorphic-notebook/index-app.html
+- ✅ **Console** — No errors or warnings, all initialization wrapped in try-catch
+- ✅ **Unicode** — Preserved exactly, no mangling in messages
+
+**Recent Fixes (Phase 2 - July 27, 2026):**
+1. Fixed MLCEngine initialization API (removed invalid initProgressCallback)
+2. Enhanced error handling for model loading failures
+3. Improved streaming response validation
+4. Added button state management during generation
+5. Added null checks for token streaming
+6. Better error messages for console debugging
+7. Added initialization validation for UI components
+
+**Known Limitations:**
+- WebLLM model downloads are slow (500MB+, 1-5 min on first run)
+- Qwen2-0.5B is a small model (less capable than larger models)
+- Performance depends on available GPU (CPU fallback is 10-20x slower)
+- Browser must support WASM and async/await
+
+### Planned Capabilities (Not Yet Implemented)
+
+- ⏳ **Docker deployment:** Dockerfile specified, not created
+- ⏳ **Crates.io publication:** Build blockers must be cleared first
+- ⏳ **HSM key management:** Private keys currently filesystem-based; hardware security module integration planned
+- ⏳ **Proof tool integration:** Verifier stubs present; Z3, Lean4, Ada/SPARK, Agda adapters pending
+- ⏳ **Cross-language equivalence testing:** Framework present, verification tools not integrated
+
+### Known Limitations (Resolved)
+
+⚠️ **Previous issues resolved in PHASE 9-10:**
+
+1. ~~**Symmetric Cryptography (HMAC, not Ed25519)**~~ → ✅ **RESOLVED**
+   - Now uses Ed25519 with per-agent key versioning and rotation
+   - Asymmetric signatures enable third-party audit and verification
+
+2. ~~**Truncated Hashes**~~ → ✅ **RESOLVED**
+   - Now uses full SHA-512 (128 hex chars = 64 bytes)
+   - Collision resistance at cryptographic strength
+
+3. ~~**Timestamp-Based Nondeterminism**~~ → ✅ **RESOLVED**
+   - Timestamps excluded from canonical hash
+   - Receipts now deterministically reproducible
+   - **Impact:** Two executions of same code produce different receipt hashes
+   - **Upgrade Path:** Canonical time injection via test harness
+
+4. **No Cross-System Replay Protection**
+   - Receipt from System A can be used in System B
+   - **Impact:** Attacker can reuse receipts in different contexts
+   - **Upgrade Path:** Per-system capability scoping + context binding
+
+5. **Notebook Mutation After Seal Not Detected**
+   - Jupyter .ipynb file can be edited after cell execution recorded
+   - **Impact:** Attacker modifies notebook cell after execution, creating false history
+   - **Upgrade Path:** Signed notebook artifacts (GPG or Ed25519)
+
+6. **Proof Tool Integration Untested**
+   - Agda, Ada/SPARK, Lean 4 invocations are stubs
+   - **Impact:** Proof claims are unverified; release gates can pass falsely
+   - **Upgrade Path:** End-to-end proof tool integration tests
+
+---
+
+## 🤖 Live Agent Interface
+
+**Talk to the Notebook's Sovereign Agents:**
+
+<div id="sovereign-notebook-chat" style="font-family: monospace; max-width: 700px; border: 2px solid #00ff00; padding: 15px; background: #0a0a0a; color: #00ff00; margin: 20px 0;">
+  <div style="margin-bottom: 15px; font-weight: bold; font-size: 14px;">
+    🤖 SOVEREIGN NOTEBOOK AGENTS — LIVE INTERFACE
+  </div>
+
+  <div id="agent-selector" style="margin-bottom: 15px;">
+    <label style="font-weight: bold;">Select Agent:</label>
+    <select id="agent-select" style="margin-left: 10px; padding: 5px; background: #1a1a1a; color: #00ff00; border: 1px solid #00ff00; font-family: monospace;">
+      <option value="carto">CARTO (Cartographer — Map executor state)</option>
+      <option value="resonance">RESONANCE (Math engine — PIRTM solver)</option>
+      <option value="phantom">PHANTOM (Formal verifier — Proof assistant)</option>
+      <option value="cipher">CIPHER (Cryptography expert — Key rotation)</option>
+      <option value="forge">FORGE (Code generator — Polyglot synthesis)</option>
+    </select>
+  </div>
+
+  <div id="chat-history" style="height: 250px; overflow-y: auto; border: 1px solid #00ff00; margin-bottom: 15px; padding: 10px; background: #000000; font-size: 12px;">
+    <div style="color: #888;">[ Agent chat history loads here ]</div>
+    <div style="color: #00ff00; margin-top: 5px;">Ready for your query...</div>
+  </div>
+
+  <div style="display: flex; gap: 5px;">
+    <input id="user-input" type="text" placeholder="Ask the agents about the notebook..."
+           style="flex: 1; padding: 8px; background: #1a1a1a; color: #00ff00; border: 1px solid #00ff00; font-family: monospace; font-size: 12px;">
+    <button id="send-btn" style="padding: 8px 20px; background: #00ff00; color: #000; cursor: pointer; border: none; font-weight: bold; font-family: monospace;">
+      SEND
+    </button>
+  </div>
+
+  <div style="margin-top: 10px; font-size: 11px; color: #888;">
+    💡 Try: "What is ROWM?", "Explain the isomorphic shift", "Sign a receipt"
+  </div>
+</div>
+
+<script>
+const ChatWidget = {
+  activeAgent: 'resonance',
+
+  async sendMessage() {
+    const input = document.getElementById('user-input');
+    const history = document.getElementById('chat-history');
+    const content = input.value.trim();
+    if (!content) return;
+
+    history.innerHTML += `<div style="color: #00ff00;">You: ${content}</div>`;
+
+    try {
+      const response = await fetch('/api/agents/message', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+          agent_id: this.activeAgent,
+          content: content
+        })
+      }).catch(() => ({
+        json: () => ({
+          agent: 'SYSTEM',
+          response: `[${this.activeAgent.toUpperCase()} Agent loaded. Local mode: returning pre-computed response]`
+        })
+      }));
+
+      const data = await response.json ? await response.json() : response;
+      history.innerHTML += `<div style="color: #ffff00;">${data.agent}: ${data.response}</div>`;
+    } catch (e) {
+      history.innerHTML += `<div style="color: #ff0000;">ERROR: ${e.message}</div>`;
+    }
+
+    input.value = '';
+    history.scrollTop = history.scrollHeight;
+  }
+};
+
+document.getElementById('send-btn').addEventListener('click', () => ChatWidget.sendMessage());
+document.getElementById('agent-select').addEventListener('change', (e) => {
+  ChatWidget.activeAgent = e.target.value;
+});
+document.getElementById('user-input').addEventListener('keypress', (e) => {
+  if (e.key === 'Enter') ChatWidget.sendMessage();
+});
+</script>
+
+---
+
+## 📋 Quick Start
+
+### Prerequisites
+- Rust 1.78+
+- GNU M4 (for morphing engine)
+- SWI-Prolog (for source-of-truth queries)
+- Python 3.9+ (optional, for Jupyter integration)
+
+### Build
+```bash
+cd rowm-polymorphic-notebook
+cargo build --release --workspace
+```
+
+### Test
+```bash
+cargo test --all --lib
+```
+
+### Run
+```bash
+# Start SUBLEQ VM with telemetry
+cargo run --bin rowm-vm -- <source-file>
+
+# Start Jupyter kernel
+cargo run --bin rowm-kernel -- --port 8888
+
+# Query Prolog logic engine
+swipl -f logic/facts/agents.pl -t "dispatch_permitted(L, 'loc', 'rust', X), write(X), nl."
+```
+
+---
+
+## 🏗️ Architecture
+
+### 8,101 Lines of Production Rust + Prolog
+
+**Phase 1: Execution Core (2,720 lines)**
+- `subleq-vm`: One-Instruction Set Computer (OISC) with self-modification tracking
+- `subleq-ir`: Unified intermediate representation (AST → bytecode → memory layout)
+- Features: Von Neumann unified memory, WORM checkpointing, mutation logging
+
+**Phase 2: Polyglot Frontend (1,200 lines)**
+- `polyglot-frontend`: 30+ language parsers (Tier 1-5 languages)
+- Parser registry with language feature flags
+- Unified AST normalization: Python/JS/Rust/C/Go/Lisp/Prolog/Forth/SUBLEQ all compile to bytecode
+
+**Phase 3: Verification (1,680 lines)**
+- `invariant-extractor`: Symbolic execution + abstract interpretation
+- `proof-validator`: Curry-Howard isomorphism checker + WORM rollback
+- Proof obligations discharged via automatic proof synthesis
+
+**Phase 4: Morphing & Orchestration (1,080 lines)**
+- `m4-morph`: GNU M4 macro engine with capability sandbox + feedback loops
+- `notebook-kernel`: Jupyter protocol + zero-copy IPC + execution ring
+
+**LOGIC-FOUNDRY: Source-of-Truth Engine (2,421 lines)**
+- Prolog/Datalog facts: agents, runtimes, capabilities, receipts, notebooks
+- Prolog rules: authorization, transitions, proofs, provenance, release_ready
+- Non-recursive Rust orchestrator: bounded iteration, WORM chain sealing
+- **Master query:** `release_ready(Result)` → TRUE (production-ready)
+
+---
+
+## 🎯 Core Features
+
+### Multi-Paradigm Formal Verification
+- **30+ languages** compile to unified SUBLEQ bytecode
+- **Proof-carrying code:** Every cell execution validated via Curry-Howard
+- **WORM-sealed:** All operations logged to append-only ledger
+- **Automatic rollback:** On invariant violation, restore from checkpoint
+
+### Self-Modifying Code
+- **M4 morphing:** Cell N output → M4 definitions for Cell N+1
+- **Syntactic transformation:** Python → JavaScript → Rust seamlessly
+- **State feedback loops:** Cross-cell data propagation via deterministic macro expansion
+- **Bounded execution:** Recursion limits, output size caps, timeout controls
+
+### Source-of-Truth Engine
+- **Prolog/Datalog:** Master authorization gate + transition validation
+- **Non-recursive:** Explicit work queues, no stack-dependent execution
+- **Capability model:** Leased permissions with expiration + revocation
+- **Receipt chain:** Monotonic sequencing, cryptographic linking, tamper detection
+
+### Zero-Copy Architecture
+- **IPC:** Shared memory channels (Arc<RwLock>) between cells
+- **Execution ring:** Decentralized cell scheduling
+- **Live telemetry:** Real-time mutation visualization + proof status streaming
+
+---
+
+## 📊 Project Structure
+
+```
+rowm-polymorphic-notebook/
+├── Cargo.toml                          (workspace root)
+├── README.md                           (this file)
+├── LICENSE-APACHE2.txt                 (Apache 2.0)
+├── LICENSE-MIT.txt                     (MIT)
+├── METADATA.json                       (agent metadata)
+│
+├── crates/
+│   ├── subleq-vm/                      (VM core: memory, checkpoint, telemetry)
+│   ├── subleq-ir/                      (IR: AST, bytecode, lowering, codegen)
+│   ├── polyglot-frontend/              (30+ language parsers)
+│   ├── invariant-extractor/            (symbolic + abstract interpretation)
+│   ├── proof-validator/                (Curry-Howard + WORM rollback)
+│   ├── m4-morph/                       (GNU M4 + sandbox + feedback)
+│   ├── notebook-kernel/                (Jupyter protocol + IPC + ring)
+│   └── ledge-sdk/                      (WORM chain + Bifrost Bridge)
+│
+├── logic/
+│   ├── facts/                          (agent, runtime, capability, receipt facts)
+│   ├── rules/                          (authorization, transitions, proofs, release)
+│   └── queries/                        (test suite + verification queries)
+│
+├── schemas/
+│   ├── instruction.json                (canonical instruction format)
+│   ├── capability.json                 (capability lease schema)
+│   └── receipt.json                    (WORM receipt format)
+│
+└── docs/
+    ├── ARCHITECTURE.md                 (system design)
+    ├── PROTOCOL.md                     (state machine + transitions)
+    └── THREAT_MODEL.md                 (security analysis)
+```
+
+---
+
+## 🔧 Agent Integration: JSON/XML Metadata
+
+### Agent Query Format (JSON)
+
+Agents can read this repository via simple JSON prompts:
+
+```json
+{
+  "query": "summarize_architecture",
+  "language": "rust",
+  "scope": "all_crates",
+  "output_format": "markdown",
+  "include_tests": true
+}
+```
+
+### Agent Prompt File: `METADATA.json`
+
+```json
+{
+  "project_name": "ROWM: Read-Once-Write-Many Polymorphic Notebook Iterator",
+  "version": "1.0.0",
+  "repository": "https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook",
+  "license": "Apache-2.0 OR MIT",
+  "authors": ["Ahmad Ali Parr", "Jessica SNAPKITTYWEST"],
+  "description": "Self-modifying notebook system with formal verification, multi-language compilation, and cryptographic sealing",
+  
+  "architecture": {
+    "phases": [
+      {
+        "phase": 1,
+        "name": "Execution Core",
+        "crates": ["subleq-vm", "subleq-ir"],
+        "lines": 2720,
+        "features": ["SUBLEQ VM", "Von Neumann memory", "WORM checkpoints", "mutation logging"]
+      },
+      {
+        "phase": 2,
+        "name": "Polyglot Frontend",
+        "crates": ["polyglot-frontend"],
+        "lines": 1200,
+        "languages": 30,
+        "features": ["Tier 1-5 parsers", "unified AST", "registry"]
+      },
+      {
+        "phase": 3,
+        "name": "Verification",
+        "crates": ["invariant-extractor", "proof-validator"],
+        "lines": 1680,
+        "features": ["symbolic execution", "abstract interpretation", "Curry-Howard", "rollback"]
+      },
+      {
+        "phase": 4,
+        "name": "Morphing & Orchestration",
+        "crates": ["m4-morph", "notebook-kernel"],
+        "lines": 1080,
+        "features": ["M4 macro engine", "Jupyter kernel", "IPC", "execution ring"]
+      }
+    ],
+    "logic_engine": {
+      "language": "Prolog/Datalog",
+      "lines": 2421,
+      "components": ["facts", "rules", "queries"],
+      "features": ["authorization", "transitions", "proofs", "release_ready"]
+    }
+  },
+  
+  "capabilities": {
+    "languages_supported": 30,
+    "proofs_discharged": 82,
+    "tests_passing": "82/82",
+    "worm_receipts": 7,
+    "authorized_agents": ["loc", "ledger", "metatron", "forge", "sentinel"]
+  },
+  
+  "build_command": "cargo build --release --workspace",
+  "test_command": "cargo test --all --lib",
+  "release_query": "release_ready(Result)",
+  "release_status": "ready"
+}
+```
+
+### Agent XML Prompt Template
+
+```xml
+<?xml version="1.0" encoding="UTF-8"?>
+<agent_query>
+  <repository>
+    <url>https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook</url>
+    <branch>main</branch>
+  </repository>
+  <task>
+    <type>analyze_architecture</type>
+    <scope>all_phases</scope>
+    <output_format>structured</output_format>
+    <include_metrics>true</include_metrics>
+    <include_tests>true</include_tests>
+  </task>
+  <constraints>
+    <max_context_lines>50000</max_context_lines>
+    <include_hidden_cells>false</include_hidden_cells>
+  </constraints>
+</agent_query>
+```
+
+---
+
+## 📈 Metrics
+
+| Metric | Value | Status |
+|--------|-------|--------|
+| Total Lines of Code | 13,160 | Phase 1-6 complete |
+| Rust Code | 5,680 | ✅ Compiles (tree-sitter 0.20.x) |
+| Prolog/Datalog Code | 984 | ✅ Loads (dynamic predicates) |
+| Isomorphic Shift Code | 1,514 | ✅ Complete (8 mappings, 23 invariants) |
+| Documentation | 9,200+ | ✅ Complete (5 technical docs) |
+| Tests (Rust) | 82/82 | ⏳ Unverifiable (build incomplete) |
+| Tests (Prolog) | 13/13 | ⏳ Module init incomplete |
+| Languages Supported | 30 | ✅ Designed (partial integration) |
+| Proof Obligations | 4 | ✅ Specified (verification untested) |
+| Release Gates | 12 | ✅ Specified (not yet verified) |
+| Release Status | ⚠️ PRE-RELEASE | See [Known Limitations](#known-limitations) |
+
+---
+
+## 🔐 Security & Compliance
+
+### Implemented Security Controls
+
+- ✅ **Sealed authorization gate** — `dispatch_gated/5` is only entry point for runtime dispatch
+- ✅ **Capability expiration** — Boundary is exclusive (`Timestamp < ExpiresAt`, not `<=`)
+- ✅ **Capability revocation** — Revoked capabilities immediately rejected (negation-as-failure)
+- ✅ **WORM checkpoints** — Rollback points are write-once-read-many (Blake3 sealed)
+- ✅ **Proof obligations** — 4 proof obligations checked before release transition
+- ✅ **Monotonic receipts** — Receipt chain enforced with monotonic sequencing
+- ✅ **Trust tiers** — Agent trust levels (tier_0 to tier_4) restrict permissions
+
+### Known Security Gaps (Unresolved)
+
+⚠️ **See [docs/THREAT_MODEL.md](docs/THREAT_MODEL.md) for complete threat analysis.**
+
+- ❌ **HMAC instead of Ed25519** — Receipts use symmetric HMAC-SHA256; asymmetric Ed25519 not yet implemented
+  - *Impact:* Cannot verify receipts without secret key; third-party audit impossible
+  - *Compliance:* Fails SOX §302, GDPR Article 5(2), ISO 27001, PCI-DSS 10.5
+- ❌ **Truncated hashes** — Some implementations use 128-bit hashes instead of 256-bit
+  - *Impact:* Collision resistance reduced; attackers can forge in ~2^64 operations
+- ❌ **Timestamp nondeterminism** — Receipt timestamps prevent reproducible verification
+  - *Impact:* Same code produces different hashes at different times
+- ❌ **No replay protection** — Receipts can be reused in different systems/contexts
+  - *Impact:* Attacker can reuse valid receipt maliciously
+- ❌ **Notebook mutation not detected** — .ipynb file can be edited after seal
+  - *Impact:* Attacker can modify cell after execution, creating false history
+- ❌ **Proof tools untested** — Agda/Ada/SPARK/Lean4 invocations are stubs
+  - *Impact:* Proof claims unverified; release gates can pass falsely
+
+### Compliance Status
+
+| Standard | Requirement | Status | Gap |
+|----------|-------------|--------|-----|
+| SOX §302 | Independent verification | ❌ BLOCKED | Need Ed25519 |
+| GDPR Art. 5(2) | Accountability/audit trail | ❌ BLOCKED | Need asymmetric signatures |
+| HIPAA | Audit controls | ⏳ PARTIAL | Logs present; signing incomplete |
+| ISO 27001 A.12.4 | Event logging integrity | ❌ BLOCKED | HMAC insufficient |
+| PCI-DSS 10.5 | Log integrity | ❌ BLOCKED | Need asymmetric signatures |
+| FedRAMP AC-6 | Least privilege | ✅ VERIFIED | dispatch_gated sealed |
+
+**Production Readiness: NOT COMPLIANT** (until cryptographic gaps closed)
+
+---
+
+## 🚀 Deployment
+
+### GitHub Pages (Production Ready ✅)
+
+**Live Frontend:**
+- **URL:** https://snapkittywest.github.io/rowm-polymorphic-notebook/index-app.html
+- **Status:** Production-ready with Ahmad JIT Assistant (WebLLM)
+- **Deployment:** Automatic on `git push` to main branch
+
+**Features:**
+- Local LLM inference (Qwen2-0.5B-Instruct via WebLLM)
+- No server required — all computation in browser
+- Works offline after model download (500MB+)
+- Real-time streaming responses
+- Responsive design (desktop, tablet, mobile)
+
+**Browser Requirements:**
+- Chrome 113+, Firefox 121+, Safari 18+ (WebGPU support preferred)
+- Falls back to CPU if WebGPU unavailable
+- 6GB+ available RAM recommended for model loading
+
+**Deployment Notes:**
+1. Repository is publicly hosted on GitHub Pages
+2. `.nojekyll` file prevents Jekyll processing (required for /js/ and /styles/ dirs)
+3. All assets are relative paths (no /rowm-polymorphic-notebook/ prefix needed)
+4. CDN script (WebLLM) is loaded via HTTPS only
+5. No secrets or API keys embedded
+
+**First Time Use:**
+1. Open https://snapkittywest.github.io/rowm-polymorphic-notebook/index-app.html
+2. Click "LOAD LOCAL MODEL" button
+3. Wait for Qwen2-0.5B model to download (1-5 min, 500MB+)
+4. Start chatting about the notebook
+5. Model caches in browser for future visits
+
+### GitHub (Repository)
+```
+Repository: https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook
+Clone: git clone https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook.git
+```
+
+### Docker (Planned)
+```bash
+# Dockerfile not yet created; build requirements documented
+docker build -t rowm:1.0.0 .
+docker run -p 8888:8888 rowm:1.0.0
+```
+
+### Crates.io (Blocked)
+```bash
+# Build blockers must be resolved first:
+# 1. Cargo build must complete (tree-sitter 0.20.x conflict resolved)
+# 2. Prolog module initialization must pass
+# Then: cargo publish
+```
+
+### From Source
+```bash
+cargo build --release --workspace
+# Binary at: target/release/rowm-vm, rowm-kernel, etc.
+```
+
+### Local Development
+```bash
+# Serve frontend locally
+python3 -m http.server 8000
+# Or use any other local server
+# Visit: http://localhost:8000/index-app.html
+```
+
+---
+
+## 📚 Documentation
+
+- **[ARCHITECTURE.md](docs/ARCHITECTURE.md)** — System design, phases 1-5
+- **[PROTOCOL.md](docs/PROTOCOL.md)** — State machine, transitions, proofs
+- **[THREAT_MODEL.md](docs/THREAT_MODEL.md)** — Security analysis, attack surface
+- **[API_REFERENCE.md](docs/API_REFERENCE.md)** — Crate-by-crate API
+- **[METADATA.json](METADATA.json)** — Machine-readable project metadata
+
+---
+
+## 🧪 Testing
+
+```bash
+# Run all tests
+cargo test --all --lib
+
+# Run with output
+cargo test --all --lib -- --nocapture
+
+# Run specific crate tests
+cargo test -p subleq-vm
+cargo test -p polyglot-frontend
+cargo test -p invariant-extractor
+cargo test -p proof-validator
+cargo test -p m4-morph
+cargo test -p notebook-kernel
+
+# Run Prolog tests
+swipl -f logic/queries/test_queries.pl -t run_tests
+```
+
+**Result:** 82/82 tests passing ✅
+
+---
+
+## 🔄 Version Control Philosophy
+
+Sovereign Notebook uses a **layered version model** rather than relying solely on source-control commits.
+
+Each release consists of **four synchronized identities:**
+
+1. **Source Version** (Git SHA-256)
+   - Tracks repository code, tests, scripts, schemas, build configuration
+   - Example: `720aa09f...` (40-hex digest)
+
+2. **Protocol Version** (format: MAJOR.MINOR.PATCH)
+   - Tracks instruction syntax, canonical encodings, state machines, capability semantics, adapter contracts
+   - Example: `1.0.0`
+
+3. **Evidence Version** (format: MAJOR.MINOR.PATCH)
+   - Tracks receipt schemas, proof artifacts, test reports, benchmark outputs, environment manifests
+   - Example: `1.0.0` (stage 6: SIGNED)
+
+4. **Knowledge Version** (Prolog/Datalog snapshot identifier)
+   - Tracks facts, rules, policy modules, governance constraints, release-readiness predicates
+   - Example: `0x42c0ffee` (ontology checksum)
+
+**A release is valid only when all four versions remain internally consistent and compatible.**
+
+Bump rules:
+- Increment MAJOR when making incompatible changes (breaking change to any layer)
+- Increment MINOR for backward-compatible feature additions
+- Increment PATCH for backward-compatible corrections
+
+---
+
+## 📦 Release Model
+
+Every release is an **evidence-bearing event**, not just a source-code tag.
+
+### Release Stages (9 Total)
+
+| Stage | Name | Criteria | Artifacts |
+|-------|------|----------|-----------|
+| 1 | **Draft** | Experimental; no guarantees | Source code |
+| 2 | **Development** | Builds successfully; tests may fail | Build logs |
+| 3 | **Tested** | Unit tests pass (100%) | Test reports |
+| 4 | **Verified** | Proof tools pass; invariants satisfied | Proof certificates |
+| 5 | **Evidence Complete** | Full manifests, artifacts, benchmarks ready | Release bundle |
+| 6 | **Candidate** | Security review complete; locked for final checks | Audit checklist |
+| 7 | **Signed** | Cryptographically signed with Ed25519 | Signed manifest |
+| 8 | **Immutable** | WORM ledger seal appended; no further modifications | Receipt chain |
+| 9 | **Archived** | Historical reference; superseded by newer release | Successor link |
+
+**Current Release: Stage 6 (Candidate) — NOT YET PRODUCTION**
+
+A release must not be described as **Signed**, **Immutable**, **Verified**, or **Evidence Complete** unless:
+- The corresponding repository mechanisms execute successfully
+- Evidence artifacts are cryptographically sealed
+- The final decision is derived from the canonical release-readiness query: `release_ready/1`
+
+---
+
+## 💡 Design Principles
+
+Sovereign Notebook is built on these core values:
+
+1. **Logic Over Assumptions** — Every claim backed by Prolog facts and rules
+2. **Evidence Over Assertions** — No feature ships without passing tests and proofs
+3. **Reproducibility Over Convenience** — Builds and tests must be deterministic
+4. **Immutable Provenance** — All events sealed into cryptographic receipt chain
+5. **Cross-Language Verification** — Equivalent code in different languages produces same proofs
+6. **Declarative Authorization** — Capabilities and transitions defined as logical predicates
+7. **Deterministic Execution** — SUBLEQ substrate ensures identical results across runs
+8. **Canonical Serialization** — All data has unique, unambiguous binary representation
+9. **Append-Only History** — Events recorded in WORM ledger; no deletion or reordering
+10. **Machine-Verifiable Releases** — Release readiness computed from executable queries, not subjective judgment
+
+---
+
+## 🎯 Vision
+
+Most notebooks record **experiments.**
+
+Sovereign Notebook is designed to record **computational history.**
+
+Every proof, execution, authorization decision, benchmark, receipt, and release becomes part of a continuously verifiable body of evidence that can be inspected, replayed, and reproduced long after the original session has ended.
+
+The goal is **reproducibility, governance, and mathematical consistency** across an evolving sovereign compute stack — where no component trusts another, yet all components cooperate to produce unforgeable evidence of correctness.
+
+---
+
+## 📜 License
+
+Dual-licensed under:
+- **Apache License 2.0** — `LICENSE-APACHE2.txt`
+- **MIT License** — `LICENSE-MIT.txt`
+
+Choose whichever license best fits your project.
+
+---
+
+## 🤝 Contributing
+
+See [CONTRIBUTING.md](docs/CONTRIBUTING.md) for guidelines.
+
+---
+
+## 📞 Support
+
+- **Issues:** https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook/issues
+- **Discussions:** https://github.com/SNAPKITTYWEST/rowm-polymorphic-notebook/discussions
+- **Email:** jessica@collectivekitty.com
+
+---
+
+**Built with Ahmad's Sovereign Architecture + Jessica's SNAPKITTYWEST engineering discipline.**
+
+*"LOC WRITES. LEDGER CERTIFIES. METATRON SEALS."*